HACKERS BREACH TRUECONF TO TROJANIZE CLIENT INSTALLERS WITH BACKDOORS

Summary from the TLDR InfoSec newsletter

The Head Mare hacktivist group exploited unauthenticated access on TCP port 4307 to chain KLCERT-26-057 and KLCERT-26-058 for sandbox escape and SYSTEM-level code execution on TrueConf servers, deploying the PhantomCore and PhantomGraph backdoors and trojanizing client installers. Fixes are available in versions 5.3.9, 5.4.9, and 5.5.5.